$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft File: 42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json) Hash identifier: Pv+mnp32/S0EfgL7UGpnvo9LKIF6ECfww3rhQsl4CmA= Subject key identifier: 8D:C7:00:58:E4:70:9E:A1:AB:24:90:4A:DA:44:BB:67:E0:82:CD:6A Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 326AFD14B8529981096604B95C22F9730C4BCF71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft Manifest number: 03AB Signing time: Wed 25 Mar 2026 13:50:49 +0000 Manifest this update: Wed 25 Mar 2026 13:45:49 +0000 Manifest next update: Sat 28 Mar 2026 16:36:49 +0000 Files and hashes: 1: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=) 2: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: NbHhFmy5+M9dcxTboMeZja93XE4Bi3M8QPJR5OVXXh0=) 3: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=) 4: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=) 5: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=) 6: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=) 7: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=) 8: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=) 9: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: 8fbkbe+zjfoqQaxLOTN723BKYFqkAiYSq9UlyPBgR3c=) 10: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=) 11: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: PrDMvAYB7DejmELDT18axQRCP8RdhUdpLoyo3trY+po=) 12: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=) 13: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=) 14: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=) 15: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=) 16: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=) 17: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: hV0liMj1B/Cfj/qZWiir6+QL1T2kT79ikHUl2gLPbjI=) 18: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=) 19: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=) 20: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=) 21: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: 3O9Dun/SNBINZ3B9YhjfBGGqTvlmzFCIO86PaMzUieA=) 22: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6a:fd:14:b8:52:99:81:09:66:04:b9:5c:22:f9:73:0c:4b:cf:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Mar 25 13:45:49 2026 GMT Not After : Mar 28 16:36:49 2026 GMT Subject: CN=8DC70058E4709EA1AB24904ADA44BB67E082CD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5d:f3:c5:5f:07:71:47:ef:f3:86:8f:85:61: 07:64:80:b3:bb:6b:03:6c:2a:56:42:d2:04:90:2e: b7:8f:80:09:d7:b9:d9:30:45:38:d3:d4:cc:99:a8: 6d:cb:1c:c4:3f:81:6f:0b:07:d5:cf:13:e8:6c:53: 58:b4:b3:66:a7:ac:67:01:95:54:ba:a4:2e:ce:89: 79:95:5f:07:60:14:9f:d4:ae:b0:47:c5:88:85:50: cb:c8:cb:c4:58:1c:c5:e0:13:26:24:60:96:00:4f: a7:7b:9b:fe:df:13:b9:82:ff:eb:50:e3:52:b7:41: e0:29:f2:af:4d:6d:57:d0:ac:f3:bf:5d:c5:d3:d5: 82:7d:61:6f:e3:d0:0c:f7:7f:a3:6e:62:79:87:61: c1:03:70:48:04:97:9c:b7:6f:a6:ef:bb:1c:91:63: 22:07:bd:fe:cf:4d:b2:ec:ab:1b:73:04:0b:d0:95: cc:a1:40:7a:11:e2:92:13:dd:a1:69:27:d0:b3:33: bd:4a:8d:04:a8:a0:7f:7b:f8:fc:6b:0d:02:5a:51: a7:ef:b2:7a:f4:9c:de:7a:f0:ec:bc:66:9f:62:45: a4:39:ba:bd:b3:46:78:0a:76:3e:45:a7:cc:24:ef: 11:a6:67:f9:bc:dc:9e:30:4b:ab:c6:93:04:98:64: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C7:00:58:E4:70:9E:A1:AB:24:90:4A:DA:44:BB:67:E0:82:CD:6A X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:59:72:f7:c6:e1:de:35:6f:0a:9f:ae:18:26:c3:9d:72:0f: 1e:c6:ac:1c:ee:fc:ba:96:08:37:e9:30:89:e2:93:62:0c:48: 96:00:b5:5c:ee:56:3b:54:1a:30:76:bc:15:f7:95:e3:0d:3e: 60:00:34:0d:02:e3:df:e0:60:37:62:11:19:06:38:f3:df:d0: ed:a8:ae:1f:1a:5e:4c:6f:c7:24:41:45:8a:c5:79:02:86:e8: 04:4c:a6:77:9d:b7:1b:08:0e:c5:35:a8:63:dd:6e:65:94:da: ea:48:85:28:27:e8:31:ee:32:8e:6d:c9:f7:05:9a:83:e5:cf: c8:e9:9a:6c:c0:2e:8b:a5:2f:4c:33:0e:4e:9c:12:2b:6a:24: 1b:85:da:e0:39:ee:8d:df:12:07:d3:7d:84:35:a9:e8:d3:f1: c3:ad:16:88:d9:f5:62:f1:4b:aa:41:2c:94:5e:9d:40:8a:17: 73:65:43:2c:f8:2d:01:68:78:79:a4:e4:fb:5e:e2:d3:d5:96: fc:50:15:9a:8f:ab:be:3a:9d:d5:1f:05:8a:a0:ab:97:db:c7: ad:09:88:39:00:41:af:4b:3f:0c:e1:f9:ab:33:b6:c6:b6:4b: 19:c0:bc:ce:fe:ec:94:d7:99:ba:37:5a:d2:a2:4a:5c:9e:21: e2:5f:6c:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmr9FLhSmYEJZgS5XCL5cwxLz3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNjAzMjUxMzQ1NDlaFw0yNjAzMjgxNjM2NDlaMDMxMTAvBgNV BAMTKDhEQzcwMDU4RTQ3MDlFQTFBQjI0OTA0QURBNDRCQjY3RTA4MkNENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXfPFXwdxR+/zho+FYQdkgLO7 awNsKlZC0gSQLrePgAnXudkwRTjT1MyZqG3LHMQ/gW8LB9XPE+hsU1i0s2anrGcB lVS6pC7OiXmVXwdgFJ/UrrBHxYiFUMvIy8RYHMXgEyYkYJYAT6d7m/7fE7mC/+tQ 41K3QeAp8q9NbVfQrPO/XcXT1YJ9YW/j0Az3f6NuYnmHYcEDcEgEl5y3b6bvuxyR YyIHvf7PTbLsqxtzBAvQlcyhQHoR4pIT3aFpJ9CzM71KjQSooH97+PxrDQJaUafv snr0nN568Oy8Zp9iRaQ5ur2zRngKdj5Fp8wk7xGmZ/m83J4wS6vGkwSYZNKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjccAWORwnqGrJJBK2kS7Z+CCzWowHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyZjIyOGMtZGYyMC00NzI4LTlm OTYtOGZhYTEzNDAwMTdhLzAvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0RE ODFFQzdDQTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhZcvfG4d41bwqfrhgmw51yDx7GrBzu/LqW CDfpMInik2IMSJYAtVzuVjtUGjB2vBX3leMNPmAANA0C49/gYDdiERkGOPPf0O2o rh8aXkxvxyRBRYrFeQKG6ARMpnedtxsIDsU1qGPdbmWU2upIhSgn6DHuMo5tyfcF moPlz8jpmmzALoulL0wzDk6cEitqJBuF2uA57o3fEgfTfYQ1qejT8cOtFojZ9WLx S6pBLJRenUCKF3NlQyz4LQFoeHmk5Pte4tPVlvxQFZqPq746ndUfBYqgq5fbx60J iDkAQa9LPwzh+asztsa2SxnAvM7+7JTXmbo3WtKiSlyeIeJfbBY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:23:33 2026 by rpki-client